In the past, yeah. But today? Never.
Have you encountered a "marketing email" that you didn't sign up for? That's called phishing.
Have you clicked on links in phishing emails? That's called getting pwned.
Legal requirements are useless without enforcement.
In the past, yeah. But today? Never.